$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: vidxFLwF7vjaBS/STtiKrTnKXt+JtUZffvFkZGjgQNc= Subject key identifier: A8:9B:13:44:5E:53:F2:97:73:3C:BD:76:6A:9D:4B:18:F2:AA:63:55 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 46669E710C8E150431D10C6F4E93136E6BBE183E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 8C Signing time: Thu 23 Jul 2026 23:59:52 +0000 Manifest this update: Thu 23 Jul 2026 23:54:52 +0000 Manifest next update: Sat 25 Jul 2026 01:15:52 +0000 Files and hashes: 1: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 2: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 3: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) 4: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 5: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 6: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) 7: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 8: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 9: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 10: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 11: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 12: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 13: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 14: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 15: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 16: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 17: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 18: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 19: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 20: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: 1oxfMUJ84ZaXCietLcNzS/+UgRneg+q41ooGDMZaTHc=) 21: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 22: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 23: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 24: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 25: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 26: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 27: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 28: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 29: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 30: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 31: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) 32: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 33: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 34: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 35: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 36: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) 37: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 38: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 39: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) 40: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) 41: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:66:9e:71:0c:8e:15:04:31:d1:0c:6f:4e:93:13:6e:6b:be:18:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Jul 23 23:54:52 2026 GMT Not After : Jul 25 01:15:52 2026 GMT Subject: CN=A89B13445E53F297733CBD766A9D4B18F2AA6355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:1f:ad:42:d7:00:67:75:52:7b:40:97:29: 53:47:fb:ea:2e:df:79:c4:84:e4:b2:33:a2:67:14: 33:93:08:41:8f:b3:21:48:a1:bc:40:ac:73:9c:ff: f9:e2:3f:6b:df:11:92:42:57:53:2d:64:b2:64:d1: 8d:0f:b7:86:c1:b0:87:17:74:5a:7b:2b:1c:00:14: 99:43:82:61:17:be:ea:6a:51:07:f1:56:ae:71:0b: 91:ae:b3:1b:ab:1f:5c:e4:67:88:24:39:64:03:18: c5:56:26:9b:2a:ff:3c:27:cb:0d:14:b3:8e:96:03: 66:32:bd:7d:d3:85:52:e0:90:f6:ef:c2:74:8f:3e: 91:93:1f:7a:2e:dc:b0:e4:40:49:e4:74:a4:43:8d: de:ff:a1:5e:77:17:97:86:cc:38:f0:68:92:f7:70: a0:2a:7f:15:03:86:0f:b8:6a:e9:96:4d:83:42:27: 74:db:2c:49:c7:11:3b:b6:3d:8e:ef:1b:23:38:d8: 19:ff:f7:42:d0:cf:bc:36:22:16:ce:31:9e:92:78: 98:3c:7e:24:54:52:0e:c9:0c:db:2f:0f:ff:97:34: df:6e:d5:8b:23:b2:e5:f5:1c:9f:d5:34:2d:f7:fb: 3a:7b:cf:a0:1c:2b:ed:74:48:e0:d9:5f:3c:81:e0: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9B:13:44:5E:53:F2:97:73:3C:BD:76:6A:9D:4B:18:F2:AA:63:55 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ea:8f:76:b3:42:d6:43:fa:f8:46:aa:eb:35:1a:70:84:cd: 82:f8:c0:94:25:59:b5:38:aa:2b:5c:81:e5:96:a4:ba:de:b9: 46:65:f0:98:6a:38:83:c9:89:38:22:e4:fb:f1:ea:e5:c0:5a: 58:6d:b7:83:95:9d:19:15:68:24:b1:28:12:2f:2e:3a:e3:44: ca:f7:af:d6:2a:e0:19:a7:58:ff:ed:88:f1:b3:98:ee:5d:5e: 98:d0:73:e4:6d:7d:f2:d4:8f:a9:9e:3c:47:cc:a3:9e:b6:55: 53:5d:65:31:43:cd:72:ee:5e:58:32:64:c6:d8:e8:3b:01:15: 87:e2:df:21:89:8e:37:8b:9e:b9:fa:12:64:90:72:09:8c:53: 36:30:e3:54:c6:b5:95:95:a2:7d:a4:0a:1c:6a:4b:dd:72:c9: 97:04:ec:af:09:dc:d4:d8:d2:6d:eb:06:9d:9b:89:3a:6e:08: a4:82:3a:76:42:ea:31:e9:d1:90:85:92:20:60:b7:9c:f2:eb: 92:df:7d:bd:e7:eb:be:46:65:36:4a:ec:91:14:1d:eb:55:a9: 15:55:39:98:22:80:70:ef:eb:96:60:2b:ed:cd:aa:11:7f:54: 5c:6c:c7:35:3c:b9:72:13:58:05:75:88:d4:89:c5:49:96:96: 4e:d2:63:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURmaecQyOFQQx0QxvTpMTbmu+GD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA3MjMyMzU0NTJaFw0yNjA3MjUwMTE1NTJaMDMxMTAvBgNV BAMTKEE4OUIxMzQ0NUU1M0YyOTc3MzNDQkQ3NjZBOUQ0QjE4RjJBQTYzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Hx+tQtcAZ3VSe0CXKVNH++ou 33nEhOSyM6JnFDOTCEGPsyFIobxArHOc//niP2vfEZJCV1MtZLJk0Y0Pt4bBsIcX dFp7KxwAFJlDgmEXvupqUQfxVq5xC5GusxurH1zkZ4gkOWQDGMVWJpsq/zwnyw0U s46WA2YyvX3ThVLgkPbvwnSPPpGTH3ou3LDkQEnkdKRDjd7/oV53F5eGzDjwaJL3 cKAqfxUDhg+4aumWTYNCJ3TbLEnHETu2PY7vGyM42Bn/90LQz7w2IhbOMZ6SeJg8 fiRUUg7JDNsvD/+XNN9u1YsjsuX1HJ/VNC33+zp7z6AcK+10SODZXzyB4Dd9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqJsTRF5T8pdzPL12ap1LGPKqY1UwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+qPdrNC1kP6 +Eaq6zUacITNgvjAlCVZtTiqK1yB5Zakut65RmXwmGo4g8mJOCLk+/Hq5cBaWG23 g5WdGRVoJLEoEi8uOuNEyvev1irgGadY/+2I8bOY7l1emNBz5G198tSPqZ48R8yj nrZVU11lMUPNcu5eWDJkxtjoOwEVh+LfIYmON4ueufoSZJByCYxTNjDjVMa1lZWi faQKHGpL3XLJlwTsrwnc1NjSbesGnZuJOm4IpII6dkLqMenRkIWSIGC3nPLrkt99 vefrvkZlNkrskRQd61WpFVU5mCKAcO/rlmAr7c2qEX9UXGzHNTy5chNYBXWI1InF SZaWTtJjGg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:42:19 2026 by rpki-client